declaration uses identifier '_GNU_SOURCE', which is a reserved identifier

function 'f_install_package_source' has cognitive complexity of 56 (threshold 25)

Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11

Potential leak of memory pointed to by 'env_path'

Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11

variable 'env_file' is not initialized

Potential leak of memory pointed to by 'env_path'

Null pointer passed to 2nd parameter expecting 'nonnull'

Null pointer passed to 1st parameter expecting 'nonnull'